[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0MYZeIOLty7rnJhWc-ma_YmMGBf6M8geiXMSRHfoZzA":3,"g5a-risk:CVE-2008-0870":131},{"success":4,"data":5,"meta":129},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":49,"references":50,"referencesCount":76,"weaknesses":77,"weaknessesCount":85,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":86,"seoMetadata":87,"configurations":112,"relatedVendorCves":127,"notableEvents":128},"CVE-2008-0870","What is CVE-2008-0870?","BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:\u002F\u002F URI for the Portal Administration Console to an http URI, which allows remote attackers to sniff the session.","BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:\u002F\u002F URI for the Portal Administra...","2008-02-21T01:44:00","2026-06-16T22:50:30.733",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.01431,[34,34,34,34,34,34,34],"High",[38,43,46],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"bea_systems","weblogic_portal","9.2","cpe:2.3:a:bea_systems:weblogic_portal:9.2:mp1:*:*:*:*:*:*",{"vendor":39,"product":40,"version":44,"criteria":45,"vulnerable":4},"10.0","cpe:2.3:a:bea_systems:weblogic_portal:10.0:*:*:*:*:*:*:*",{"vendor":47,"product":40,"version":41,"criteria":48,"vulnerable":4},"oracle","cpe:2.3:a:oracle:weblogic_portal:9.2:*:*:*:*:*:*:*",3,[51,56,60,64,68,70,72,74],{"url":52,"source":53,"tags":54},"http:\u002F\u002Fdev2dev.bea.com\u002Fpub\u002Fadvisory\u002F264","Bea",[55],"Patch",{"url":57,"source":58,"tags":59},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F29041","Secunia",[],{"url":61,"source":62,"tags":63},"http:\u002F\u002Fwww.securitytracker.com\u002Fid?1019442","Securitytracker",[],{"url":65,"source":66,"tags":67},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2008\u002F0613","Vupen",[],{"url":52,"source":53,"tags":69},[55],{"url":57,"source":58,"tags":71},[],{"url":61,"source":62,"tags":73},[],{"url":65,"source":66,"tags":75},[],8,[78],{"id":79,"name":80,"description":81,"extendedDescription":27,"status":82,"abstraction":83,"structure":84},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","Draft","Base","Simple",1,[],{"title":88,"metaDescription":89,"keywords":90,"canonicalUrl":91,"structuredData":92},"What is CVE-2008-0870? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2008-0870, a high severity cyber security vulnerability from 2008. BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2,...","CVE-2008-0870, CVE-2008-0870 vulnerability, CVE-2008-0870 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2008, CVSS score, exploit, patch, remediation, bea_systems security, oracle security, weblogic_portal vulnerability","\u002Fwhat-is\u002Fcve-2008-0870",{"@context":93,"@type":94,"headline":88,"description":89,"datePublished":10,"dateModified":11,"author":95,"publisher":99,"about":103,"mainEntityOfPage":107,"articleSection":110,"keywords":111},"https:\u002F\u002Fschema.org","TechArticle",{"@type":96,"name":97,"url":98},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":96,"name":97,"url":98,"logo":100},{"@type":101,"url":102},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":104,"name":6,"description":105,"additionalType":106},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":108,"@id":109},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2008-0870","Cybersecurity","CVE-2008-0870, CVE-2008-0870 vulnerability, CVE-2008-0870 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[113],{"Operator":28,"Negate":28,"Nodes":114},[115],{"Operator":116,"Negate":32,"CPEMatch":117},"OR",[118,120,123,125],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":119,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"25C589AB-11C3-45E4-9E12-6151C9B2A5F4",{"Vulnerable":4,"Criteria":121,"MatchCriteriaID":122,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:bea_systems:weblogic_portal:9.2:mp2:*:*:*:*:*:*","0C4F2325-0D65-4324-9B71-C6118D79D568",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":124,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"DD825443-FB5F-466A-B059-3546D8F71411",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":126,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B04835B2-7FE9-462B-B989-4031D43C9670",[],[],{"lastModified":11,"cacheTime":130,"version":22},1793199546615,{"score":132,"band":133,"action":134,"scoredAt":135},46,"Medium","Plan remediation","2026-10-28T06:34:58.195124+00:00"]